Canonical yakaburitsa kuburitswa kwe iyo nyowani vhezheni yezvishandiso zvako kuronga mashandiro emidziyo yakadzivirirwa - LXC 4.0, maneja wemidziyo LXD 4.0 uye FS LXCFS chaiyo 4.0 yekufananidza mumidziyo / proc, / sys uye yakagadziriswa cgroupfs yekugovera pasina rutsigiro rwemazita ezvinzvimbo zvegroup.
Kune avo vasingazive maturusi aya, vanofanirwa kuziva izvozvo LXC inguva yekumhanya yekumhanyisa zvese zviri zviviri sisitimu midziyo nemidziyo yekushandisa yega (OCI). LXC inosanganisira raibhurari ye liblxc, seti yezvishandiso, matemplate ekugadzira midziyo, uye seti yemaforodha emitauro dzakasiyana siyana.
LXD ipulagi-in yeLXC, CRIU uye QEMU chii chinoshandiswa kugadzirisa zviri pakati midziyo uye chaiwo michina pane imwechete kana akawanda maseva. Kana LXC iri yakadzika-nhanho turakiti yekushandisa padanho remidziyo yemidziyo, LXD inoitwa seyakasarudzika nzira inogamuchira zvikumbiro pamusoro peneti kuburikidza neREST API uye inokutendera iwe kuti ugadzire zvigadzirisike zvinogadziriswa zvakaitwa musumbu remaseva mazhinji.
Inotsigira akasiyana ekuchengetedza ekumashure (dhairekitori muti, ZFS, Btrfs, LVM), mapikicha ane cutoff yenyika, kurarama kutama kwemidziyo yekushanda kubva kune mumwe muchina uchienda kune mumwe, uye maturusi ekurongedza kuchengetedza kwemifananidzo. Iyo LXD kodhi yakanyorwa muGo uye inoparadzirwa pasi peApache 2.0 rezinesi.
Chii chitsva muLXC 4.0?
Mune iyi vhezheni itsva, mutungamiriri wekushanda pamwe negroup rakanyorwazve, Kunze kwaizvozvo yakawedzera rutsigiro rwehukama hweboka rakabatana (cgroup2), yakawedzera freezer controller mashandiro ayo iwe aunogona kumisa kushanda pagroup uye nekumboburitsa zvishoma zvimwe zviwanikwa (CPU, I / O uye pamwe kunyange ndangariro) kuita mamwe mabasa.
Uyewo akawedzera rutsigiro rweiyo kernel subsystem "pidfd" yakagadzirirwa kubata PID mashandisirwo ezvinhu
Uyewo, zvivakwa zvakaitwa kuti zvibvise mafoni ekufona uye iko kusikwa uye kubviswa kwakagadziridzwa kunetiweki michina, pamwe nekufamba kwavo pakati pemazita ezvinzvimbo enetwork subsystem
Uye kugona kufambisa isina waya netiweki zvishandiso (nl80211) kumidziyo kwakaitwa.
Chii chitsva muLXD 4.0?
Kugovera maseva eLXD, pfungwa yeprojekti yakafemerwa iyo inorerutsa manejimendi emapoka emidziyo uye chaiwo michina. Chirongwa chega chega chinogona kusanganisira seti yaro yemidziyo, chaiwo michina, mifananidzo, profiles, uye zvikamu zvekuchengetedza. Nezve mapurojekiti, iwe unogona kuseta yako wega marambidzo uye nekuchinja marongero.
Iyo rutsigiro rwekutanga kwete chete midziyo, asi zvakare chaiwo michina, zvakare rutsigiro rwekubatisisa system inoshevedza midziyo, pamwe nerutsigiro rwemashiffs, chaiyo FS yekupa makomo ekumusoro kune mushandisi namespace (mushandisi namespace).
Wakawedzera kugona kumisikidza iyo MAC kero uye kuona iyo sosi kero yeNAT uye zvakare yakawedzerwa API yekugadzirisa zvisungo muDHCP.
Zvakare zvinopihwa mukuburitswa kutsva uku kugadzira otomatiki ezvinyorwa zvemamiriro enzvimbo uye zvikamu zvekuchengetera nekwanisi yekumisikidza hupenyu hwese hwechiridzwa.
Yeimwe shanduko dzataurwa mushambadziro:
- Yakagadziriswa nharaunda kuchengetedza uye kupora.
- Yakawedzera API yekutarisa mamiriro enetiweki (lxc network ruzivo).
- Mhando nyowani dze "ipvlan" uye "routed" network adapters inokurudzirwa.
- Yakawedzera backend yekushandisa CephFS yakavakirwa storages.
- Masumbu anotsigira kudzokorodza mufananidzo uye akawanda masisitimu ekugadzirisa.
- Yakawedzera Basa Rakavakirwa Kupinda Kudzora (RBAC).
- Wakawedzera rutsigiro rweCGroup2.
- Tsigiro yeNftables yakawedzerwa.
Finalmente kana iwe uchida kuziva zvakawanda nezvazvo pamusoro penyaya dzeshanduro iyi nyowani, unogona kutarisa iwo ruzivo Mune inotevera chinongedzo.